{
 "slug": "victoriametrics",
 "name": "VictoriaMetrics",
 "tagline": "Time-series database and Prometheus-compatible monitoring backend",
 "category": "database",
 "use_cases": [
  "time-series",
  "prometheus-compatible",
  "long-term-metrics"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "VictoriaMetrics",
  "url": "https://victoriametrics.com/",
  "license": "Apache-2.0",
  "license_url": "https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "restricted",
   "restricted_on": "2026-08-24"
  },
  "azure": {
   "status": "live",
   "version": "1.153.0",
   "last_build": "2026-10-02",
   "offer_id": "victoriametrics",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:victoriametrics:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.victoriametrics?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/victoriametrics/",
  "json": "https://lynxroute.com/products/victoriametrics/product.json"
 },
 "release_notes": [
  {
   "version": "1.153.0",
   "title": "VictoriaMetrics 1.153.0",
   "notes": "* VictoriaMetrics single-node updated 1.152.0 -> 1.153.0. Apache-2.0 unchanged\n* Security: memory limits are now applied to zstd-encoded blocks ingested via native import, preventing excessive memory allocation from crafted requests\n* Service-discovery scrape targets are now dropped when a *_sd_config returns an empty target list, instead of being kept until restart\n* Opt-in random-read hints for data part files can reduce disk I/O and improve page cache efficiency\n* Slightly lower CPU usage during concurrent queries; the vmui auto-refresh controls move to the Execute button\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base to pick up the latest Ubuntu security updates\n",
   "source": "backfill-git",
   "live": {
    "azure": "2026-10-02"
   }
  },
  {
   "version": "1.148.0",
   "title": "VictoriaMetrics 1.148.0",
   "notes": "* VictoriaMetrics 1.148.0 single-node community edition (Apache-2.0) on Ubuntu 24.04 LTS - version update from 1.147.0. Community-only, never an enterprise build\n* Clean release - no breaking changes, no removed or renamed flags, no changed defaults, no new dependencies\n* New opt-in -maxBackfillAge flag (not enabled in this image); Go toolchain updated to 1.26.5 (security)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "azure": "2026-07-22"
   }
  },
  {
   "version": "1.147.0",
   "title": "VictoriaMetrics 1.147.0",
   "notes": "* VictoriaMetrics 1.147.0 single-node community edition (Apache-2.0) on Ubuntu 24.04 LTS - version update from 1.144.0. Community-only, never an enterprise build\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "azure": "2026-07-11"
   }
  },
  {
   "version": "1.144.0",
   "title": "VictoriaMetrics 1.144.0 - Initial release (June 2026)",
   "notes": "* VictoriaMetrics 1.144.0 single-node community edition (Apache-2.0) on Ubuntu 24.04 LTS\n* Community single-node binary from the official GitHub release - enterprise build never downloaded or shipped (build-time assertion)\n* Database bound to localhost (port 8428); Nginx HTTPS reverse proxy on 443\n* HTTP Basic Auth perimeter with a unique credential generated at first launch\n* certbot and the Nginx plugin pre-installed for one-command CA-signed HTTPS\n* 12-month retention on a dedicated data path\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* UFW firewall pre-configured (ports 22, 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {}
  }
 ],
 "release_history": [
  {
   "version": "1.153.0",
   "azure": "2026-10-02"
  },
  {
   "version": "1.152.0",
   "azure": "2026-09-16"
  },
  {
   "version": "1.151.0",
   "azure": "2026-09-06"
  },
  {
   "version": "1.150.0",
   "azure": "2026-08-19"
  },
  {
   "version": "1.148.0",
   "azure": "2026-07-22"
  },
  {
   "version": "1.147.0",
   "azure": "2026-07-11"
  },
  {
   "version": "1.146.0",
   "azure": "2026-06-25"
  }
 ],
 "deploy": {
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer victoriametrics --plan payg-gen2\naz vm create -g my-rg -n victoriametrics --size Standard_D2s_v3 \\\n  --image lynxroute:victoriametrics:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "VictoriaMetrics is a Go-based, single-binary time-series database and monitoring solution designed for high performance and low resource usage. It speaks the Prometheus ecosystem natively: ingest metrics via Prometheus remote_write, the InfluxDB line protocol, Graphite, OpenTSDB, CSV, or its JSON import API, and query them back with PromQL or the more expressive MetricsQL through a Prometheus-compatible HTTP API. A built-in web UI (vmui) lets you explore and graph metrics straight from the browser. This is the single-node edition: one self-contained process that stores samples in its own on-disk TSDB, so there is nothing else to operate. Data is kept with a 12-month retention window by default on a dedicated data path. The community edition is Apache-2.0, so the whole stack is auditable with no vendor lock-in, and running it in your own AWS account keeps all metrics inside your boundary.",
  "image_adds": "Security hardening:\n* VictoriaMetrics (port 8428) bound to localhost only - never exposed directly\n* Nginx reverse proxy with TLS on port 443 in front of the HTTP API and vmui\n* HTTP Basic Auth perimeter with a unique credential generated at first launch (single-node VictoriaMetrics has no built-in auth)\n* Community single-node build only - the enterprise build is never downloaded or shipped (verified by a build-time assertion)\n* certbot and the Nginx plugin pre-installed for one-command CA-signed HTTPS\n* UFW firewall - ports 22, 80, 443 only\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}